Assign temporary administrator roles in the Google Admin console

Admins can now assign administrator roles to users, groups, or service accounts for a defined period of time. Once the expiration time is reached, the access granted by the role is automatically revoked.

This feature helps minimize security risks by reducing standing privileges and ambient access throughout your organization. It also streamlines administrative overhead, removing the need to manually track and revoke temporary privileges for short-term projects, coverage during employee absences, or external audits.

When assigning a role, super admins can choose from predefined durations (such as 30 days) or set a custom expiration date and time.

Temporary roles cannot be assigned to the primary admin for your organization, as the primary admin requires permanent super admin privileges.

Getting started

• Admins: Visit the Help Center to learn more about assigning admin roles for a specific duration.
• End users: There is no end user setting for this feature.

Rollout pace

• Rapid Release and Scheduled Release domains: Available now

Availability

• Available to all Google Workspace customers